ZyAIR Access Point Series User’s Guide

 

 

Table 17-2 Menu 23.4 System Security : IEEE802.1x

 

 

 

 

 

FIELD

DESCRIPTION

 

 

 

 

 

Authentication

This field is activated only when you select Authentication Required in the Wireless

 

Databases

Port Control field.

 

 

The authentication database contains wireless station login information. The local user

 

 

database is the built-in database on the ZyAIR. The RADIUS is an external server. Use

 

 

this field to decide which database the ZyAIR should use (first) to authenticate a

 

 

wireless station.

 

 

Before you specify the priority, make sure you have set up the corresponding database

 

 

correctly first.

 

 

Select Local User Database Only to have the ZyAIR just check the built-in user

 

 

database on the ZyAIR for a wireless station's username and password.

 

 

Select RADIUS Only to have the ZyAIR just check the user database on the specified

 

 

RADIUS server for a wireless station's username and password.

 

 

Select Local first, then RADIUS to have the ZyAIR first check the user database on

 

 

the ZyAIR for a wireless station's username and password. If the user name is not

 

 

found, the ZyAIR then checks the user database on the specified RADIUS server.

 

 

Select RADIUS first, then Local to have the ZyAIR first check the user database on

 

 

the specified RADIUS server for a wireless station's username and password. If the

 

 

ZyAIR cannot reach the RADIUS server, the ZyAIR then checks the local user

 

 

database on the ZyAIR. When the user name is not found or password does not match

 

 

in the RADIUS server, the ZyAIR will not check the local user database and the

 

 

authentication fails.

 

 

 

 

 

Dynamic WEP

This field is activated only when you select Authentication Required in the Wireless

 

Key Exchange

Port Control field. Also set the Authentication Databases field to RADIUS Only.

 

 

Local user database may not be used.

 

 

Select Disable to allow wireless stations to communicate with the access points without

 

 

using Dynamic WEP Key Exchange.

 

 

Select 64-bit WEP or 128-bit WEP to enable data encryption. Up to 32 stations can

 

 

access the ZyAIR when you configure Dynamic WEP Key Exchange.

 

When you have completed this menu, press [ENTER] at the prompt “Press ENTER to confirm or ESC to cancel” to save your configuration or press [ESC] to cancel and go back to the previous screen.

Once you enable user authentication, you need to specify an external RADIUS server or create local user accounts on the ZyAIR for authentication

System Security

17-5